/etc/libnss-ato.conf without notes. Thanks to Markus Brunner for reporting